MASSIVE DATABASE LEAK REVEALS PRIVATE DATA OF 30 MILLION SOUTH AFRICANS

A database which contains private data of millions of South Africans – including ID numbers, contact details, addresses, and income estimates – has been exposed. The data was discovered by Troy Hunt and the name of the file containing the data was “masterdeeds”, suggesting it may have been obtained from the Deeds Office – the custodian of information about property owners in South Africa.

Hunt told MyBroadband that the leaked database is a 27.2GB backup file that he found available as a torrent some time ago. He imported the backup and gained 31.6 million records before it crashed. Hunt said that one record was only 594 characters. Assuming an average record length of 600 bytes, that means there could be over 47 million records in the database.

Hunt took a look at all the data and ended up querying it of people who granted permission for him to do so, and the results looked legitimate.

Although it appears the data might be compiled from multiple sources. Address, income, living standard measure, contact, and employment information seem to be more current than the title deed data. It is not clear where the data originated from, or who leaked it.

The backup file was last modified back in March 2017, giving a possible date the breach took place. Hunt noted it could have happened earlier, however, as the data dates back to the early 1990s. The Department of Rural Development and Land Reform has a website through which title deed data may be queried called DeedsWeb.

MyBroadband has contacted the Chief Registrar of Deeds and the State Information Technology Agency for comment.